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This is in response to the Remand from the BPAI filed 12 January 2006. The rejection under 35 USC § 

101 is hereby withdrawn. 
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(1) Real Party in Interest 

A statement identifying the real party in interest is contained in the brief. 

(2) Related Appeals and Interferences 

A statement identifying the related appeals and interferences which will directly affect or 
be directly affected by or have a bearing on the decision in the pending appeal is contained in the 
brief. 

(3) Status of Claims 

The statement of the status of the claims contained in the brief is correct. 

(4) Status of Amendments After Final 

The appellant's statement of the status of amendments after final rejection contained in 
the brief is correct. 

(5) Summary of Invention 

The summary of invention contained in the brief is correct. 

(6) Issues 

The appellant's statement of the issues in the brief is correct. 

(7) Grouping of Claims 

The rejection of claims 1-15 stand or fall together because appellant's brief does not 
include a statement that this grouping of claims does not stand or fall together and reasons in 
support thereof. See 37 CFR 1.192(c)(7). However, appellant does provide a separate argument 
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for claims 2, indicting that claims 1 and 3-15 are grouped together and claim 2 is grouped 
separately. 

(8) Claims Appealed 

The copy of the appealed claims contained in the Appendix to the brief is correct. 



(9) Prior Art of Record 

5,689,565 A Spies et al. 11-1997 

EP 1,081,916 A2 US King 07-2000 

Kroenke, David M. "Database Processing: Fundamentals, Design, and Implementation" 

(10) Grounds of Rejection 

The following ground(s) of rejection are applicable to the appealed claims: 

Previous Claim Rejections - 35 USC § 101 

Then rejection of claims 1-5 are rejected under 35 U.S.C. 101 is withdrawn. 



Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 



A patent may not be obtained though the invention is not identically disclosed or described as 
set forth in section 102 of this title, if the differences between the subject matter sought to be 
patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains. Patentability shall not be negatived by the manner in 
which the invention was made. 
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Claims 1, 2, 6, 7, 11, and 12 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
King (EP 1,081,916 A2), in view of Kroenke, "Database Processing: Fundamentals, Design, and 
lmplementation"(c)1 999. 

Claims 1, 6, and 11: 

King as shown, discloses the following limitations: 

• identifying the parties involved in a process of handling personally identifiable 
information (page 4, lines 30-31); 

• identifying the data involved in said process (page 4, lines 42-43); 

• classifying the data (page 5, lines 50-51 ); 

• expressing each relationship between each pair of said parties in terms of a 
privacy agreement (page 4, lines 30-31); 

• said privacy agreement is specific to a single purpose (page 8, lines 1-50). 

• said privacy agreement expresses rules regarding said privacy-related 
actions, for each of said parties (abstract); 

King does not specifically disclose the following limitations, but Kroenke, as shown does. 

• representing said parties, said data, and said privacy agreements graphically 
in one or more privacy agreement relationship diagrams (Figures 3-3 to 3- 
11), wherein: 

• said privacy agreement uses a limited number of privacy-related actions 
concerning said personally identifiable information (Figure 3-15); 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to combine King's method and system for exchanging sensitive information with 
Kroenke's relational database management system because the RDBMS allows entities 
and classes each with their own attributes to be modeled in relation to each other so as 
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to form a construct that relies relationships and rules that would permit the use, access, 
and modification of sensitive personal information quickly and easily, as well as securely. 

Claims 2, 7, and 12: 

King discloses exchanging sensitive information as shown above. King does not 
specifically disclose mapping a business process to the privacy rules that should govern the 
behavior of each pair of parties. However, Kroenke discloses entity relationship diagrams that 
show cardinality between classes and entities (see at leas Figures 3-3). Kroenke also discloses 
that there are many different ways of modeling a business situation using the relational data base 
environment (page 67). It would have been obvious to one of ordinary skill in the art at the time 
of the invention to combine King's method and system for exchanging sensitive information with 
Kroenke's relational database management system because the RDBMS allows entities and 
classes each with their own attributes to be modeled in relation to each other so as to form a 
construct that relies relationships and rules that would permit the use, access, and modification of 
sensitive personal information quickly and easily, as well as securely. 

Claims 3-5, 8-10, and 13-15 are rejected under 35 U.S.C. 103(a) as being unpatentable over King 
(EP 1,081,916 A2), in view of Kroenke, "Database Processing: Fundamentals, Design, and 
lmplementation"(c)1999, and further in view of Spies et al. (US 5,689,565). 

Claims 3-5, 8-10, and 13-15: 

King discloses exchanging sensitive information as shown above. King does not 
specifically disclose mitigating the risks associated with handling sensitive information. Spies, 
however, in column 1, lines 26-29, states, "To provide a secure interchange of information in the 
electronic arena, one traditional approach to mitigating the risk of having sensitive information 
intercepted was to institute proprietary computerized systems that were closed to the general 
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public." Although Spies does not specifically teach identifying opportunities to reduce privacy- 
related risks involved in said process, identifying unnecessary exchanges of data for possible 
elimination, and identifying opportunities to transform data into a less sensitive form, Spies shows 
that mitigating risk associated with personal, sensitive information has been addressed by 
reducing and restricting the access that individuals and organizations have private data. 
Identifying opportunities to reduce the risk by reducing unnecessary changes to the data and 
transforming data into a less sensitive form are obvious ways of mitigating the risk of 
inadvertently releasing sensitive information into the hands of persons who are not authorized 
access to such a data. Spies, as shown above, foresees this risk and accomplishes the same 
resolution under the umbrella of reducing the exposure of sensitive information to authorized 
personnel. 

(11) Response to Argument 

Issue 1 

With regard to the rejection of claims 1-5 35 U.S.C. 101, appellant argues that this is an 
improper rejection. However, as stated in MPEP 2106 II.A, when a claim is devoid of 
technological application, it should be rejected. Appellant cites State Street Bank & Trust Co. v. 
Signature Financial Group inc., 149 F. 3d 1368, 1373, 47 USPQ2d 1596, 1601-02 (Fed. Cir. 
1998), cert, denied, 525 U.S. 1093 (1999). However, the Examiner is not asserting that the 
claimed invention does not produce a useful, concrete or tangible result. Appellant's argument is 
misplaced and therefore moot. Appellant also cites AT&T Corp. F. Excel Communications, Inc., 
172 F.3d 1352, 1358, 50 USPQ2d 1447, 1452 (Fed. Cir. 1999). In this case, the appellants 
claims do not come close to rising to the level In Ex parte Bowman 61 USPQ2D 1669, the Board 
of patent Appeals and Interferences states, "The phrase 'technological arts' has been created to 
offer another view of the term 'useful arts.' The Constitution of the United States authorizes and 
empowers the government to issue patents only for inventions which promote the progress [of 
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science and] the useful arts. We find that the invention before us, as disclosed and claimed, does 
not promote the progress of science and the useful arts, and does not fall within the definition of 
technological arts. The abstract idea which forms the heart of the invention before us does not 
become a technological art merely by the recitation in the claim of transforming physical media 
into a chart' [sic, drawing or creating a chart] and 'physically plotting a point on said chart'." 
Clearly, the BPAI requires a technological aspect to the claims, which the claim language 
currently lacks, as written. 

Issue 2 

The appellant asserts that King's "privacy agreement" clearly does not have the same 
meaning, and does not have the breadth of utility shown for a privacy agreement in the subject 
patent application. The Examiner respectfully disagrees and points to the appellant's 
specification, page 20, lines 28-29, wherein the appellant unmistakably states, "The (privacy) 
agreement can be between any two parties whether they be a natural persons, departments, 
computer systems or organizations." Since the invention of King is directed to wireless client 
systems, this assertion by the appellant is in unambiguous contradiction to the appellant's 
arguments and plainly places King within the scope and intent of the specification and claims as 
written. 

Continuing, the appellant asserts that King and Kroenke teach away from the claimed 
subject matter. Again, the Examiner respectfully disagrees and points to the appellant's 
specification, page 20, lines 28-29, wherein the appellant unmistakably states, "The (privacy) 
agreement can be between any two parties whether they be a natural persons, departments, 
computer systems or organizations." Since the invention of King is directed to wireless client 
systems, this assertion by the appellant is in unambiguous contradiction to the appellant's 
arguments and plainly places King within the scope and intent of the specification and claims as 
written. Moreover, Kroenke is not relied upon to show a privacy agreement, but rather to teach 
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implementation of a privacy agreement in an Object-Oriented framework, as described by the 
appellant in the specification. 

Appellant goes on to assert that a suggestion or motivation to combine reference 
teachings is absent in this case. The examiner disagrees and points at least to King paragraph 
0007, as well as Kroenke, pages 59+, Documentation of Business Rules. As one of ordinary skill 
in the art would attest as is shown by the combination of King/Kroenke, Business rules i.e. privacy 
agreements, may be easily incorporated and implemented within the Object-Oriented 
environment. 

Appellant asserts that the cited references are not in the same field, and are not 
reasonably pertinent to the same problem. The examiner respectfully disagrees. All prior art of 
record directed to a similar field of endeavor because all use computer implemented methods to 
solve similar problems. 

Issue 3 

With regard to the Applicant's assertions that the prior art of record does not fairly teach 
or disclose each and every limitation contained within claim 2, it appears as if the Applicant is 
reading limitations into the claims from the specification. Consequently, the points argued are not 
recited in the claim themselves. The Examiner has taken the broadest and most reasonable 
interpretation of the claim limitations as written, in light of the specification. Although the 
specification may contain recitations of intended use, alternative points of view and subjective 
interpretative differences between the prior art of record and the present invention as 
premeditated, it is the claims themselves that are given patentable weight only inasmuch as they 
are constructed. As such, Kroenke discloses entity relationship diagrams that show cardinality 
between classes and entities (see at leas Figures 3-3). Kroenke also discloses that there are 
many different ways of modeling a business situation using the relational data base environment 
(page 67). 
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For the above reasons, it is believed that the rejections should be sustained. 



Respectfully submitted, 




James A. Reagan 
Examiner 
Art Unit 3621 
27 February 2006 
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